weapp-tailwindcss
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as an instructional router and configuration guide. It contains no executable scripts, system commands, or network operations.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user queries regarding framework setup, it does so through a controlled routing mechanism to specialized sub-skills ($weapp-tailwindcss-setup, etc.). It provides a baseline of information (references/safety-baseline.md) that emphasizes collecting environment details rather than executing unvalidated user input.
- [REMOTE_CODE_EXECUTION]: There is no evidence of remote script fetching, piped execution, or dynamic code evaluation. All package references (such as @weapp-tailwindcss/cli) are mentioned as project dependencies for user-managed environments rather than self-installing components.
Audit Metadata